Privacy Policy

1. Who we are

LendKoPH ("LendKoPH", "we", "us", or "our") provides lending and accounting software to Philippine lending companies through the website at lendkoph.com and the application at lendkoph.com/app (together, the "Service"). For the personal data we process about our account holders and website visitors, LendKoPH acts as a personal information controller under the Data Privacy Act. Where we process data that our customers enter about their own borrowers, LendKoPH acts as a personal information processor on the customer's behalf, and the customer remains the controller of that data.

2. Personal data we collect

We collect the following categories of information:

• Account information — the name, email address, company name, and password you provide when you register. Passwords are stored only in hashed form; we never store them in plain text.
• Business and transaction data you enter — information you record in the Service to run your lending operations, which may include details about your clients, co-makers, loans, payments, and ledgers. This is your data; we process it to provide the Service to you.
• Usage and device information — basic technical data such as your IP address, browser type, pages visited, and timestamps, collected automatically to keep the Service secure and working.
• Communications — messages you send us, such as support requests or feedback.

We do not intentionally collect sensitive personal information (as defined by the Data Privacy Act) about website visitors, and we ask that you do not submit more personal data than the Service requires.

3. How and why we use your data

We process personal data for these purposes: to create and maintain your account; to provide, operate, and secure the Service; to generate the reports and books you request; to respond to your inquiries and provide support; to detect, prevent, and address fraud, abuse, or technical issues; and to comply with legal obligations. Our legal bases under the Data Privacy Act include your consent, the performance of a contract with you, our compliance with a legal obligation, and our legitimate interests in running and protecting the Service, balanced against your rights.

4. Cookies and similar technologies

The Service uses a small number of cookies. A strictly necessary cookie keeps you securely signed in to the application; without it, the app cannot function. We also store your cookie-consent choice so we do not ask you again on every visit. We do not use advertising cookies. If we introduce optional analytics in the future, we will only enable them after you consent through our cookie banner, and you can change your choice at any time. You can also control cookies through your browser settings, though disabling the necessary cookie will prevent you from logging in.

5. Demo accounts

Demo accounts are temporary. A demo account and all data associated with it are automatically and permanently deleted 24 hours after sign-up. Please do not enter real borrower data into a demo account.

6. Sharing and disclosure

We do not sell your personal data. We may share it only with: service providers who host or support the Service and process data on our behalf under confidentiality obligations; authorities or third parties when required by law, legal process, or a lawful order; and a successor entity in connection with a merger, acquisition, or reorganization, subject to this Policy. Any processing on our behalf is governed by an appropriate data processing agreement.

7. Data retention

We keep personal data only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it. Demo-account data is deleted within 24 hours as described above.

8. Security

We use reasonable and appropriate organizational, physical, and technical measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, access controls, and tenant separation so each company's data is kept apart. No method of transmission or storage is completely secure, but we work to protect your information and to address incidents promptly. In the event of a personal data breach that meets the threshold under the Data Privacy Act, we will notify the NPC and affected data subjects as required by law.

9. Your rights as a data subject

Under the Data Privacy Act, you have the right to: be informed about how your data is processed; access your personal data; have inaccurate data corrected; object to or withdraw consent for certain processing; have your data erased or blocked in the circumstances allowed by law; obtain a copy of your data in a portable format (data portability); be indemnified for damages arising from unlawful processing; and file a complaint with the National Privacy Commission. To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

10. Data Protection Officer and contact

If you have questions about this Policy or how we handle your data, or if you wish to exercise your rights, contact our Data Protection Officer at support@lendkoph.com or our general contact at support@lendkoph.com. You also have the right to lodge a complaint with the National Privacy Commission (privacy.gov.ph).

11. Children

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal data from children.

12. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated Policy.

This Privacy Policy is provided for transparency and does not constitute legal advice. It should be reviewed against your own circumstances and, where needed, with qualified counsel.